CVE-2014-0669 Business logic in n/a
Remote attackers can bypass Top-Up payment restrictions on Cisco ASR 5000 devices by sending malicious WSP packets.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2014-0669?
CVE-2014-0669 is a medium-severity vulnerability in n/a, published on 22 Jan 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Wireless Session Protocol (WSP) feature in the Gateway GPRS Support Node (GGSN) component on Cisco ASR 5000 series devices allows remote attackers to bypass intended Top-Up payment restrictions via unspecified WSP packets, aka Bug ID CSCuh28371.
Weakness: CWE-264
Which versions are affected by CVE-2014-0669?
It affects 1 product.
Products include Cisco Asr 5000 Series Software.
How do I fix CVE-2014-0669?
No fix has been published for CVE-2014-0669 yet. Limit exposure of the affected software until one is available.
Is CVE-2014-0669 being exploited?
There is no known exploitation of CVE-2014-0669 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2017-3819 Privilege escalation in Cisco StarOS
- CVE-2017-6612 Open redirect in Cisco ASR 5000 Series Aggregation Services Routers
- CVE-2017-6672 Security feature bypass in Cisco ASR 5000 Series Aggregation Services Routers
- CVE-2016-6467 Denial of service in Cisco Aggregation Services Router (ASR) 5000 Series Switch
- CVE-2016-9203 Denial of service in Cisco ASR 5000
Sources
Also known as GHSA-x8mp-q875-3hv2.